tests/Test-HostFirewallPorts.ps1

function Test-HostFirewallPorts {
    [CmdletBinding()]
    param (
        [parameter()][string] $TestName = "Network Firewall Ports",
        [parameter()][string] $TestGroup = "configuration",
        [parameter()][string] $TestCategory = "HOST",
        [parameter()][string] $Description = "Test open firewall TCP ports",
        [parameter()][hashtable] $ScriptParams
    )
    try {
        $startTime = (Get-Date)
        # reference: https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports
        [string]$Setting = Get-CmHealthDefaultValue -KeySet "siteservers:tcpports" -DataSet $CmHealthConfig
        [System.Collections.Generic.List[PSObject]]$tempdata = @() # for detailed test output to return if needed
        $stat   = "PASS" # do not change this
        $except = "FAIL"
        $msg    = "No issues found" # do not change this either
        $ErrorActionPreference = 'SilentlyContinue'
        $counter = 0; $good = 0; $bad = 0
        # NOTE FOR FUTURE IMPROVEMENT: ADD OTHER SITE SYSTEMS AND CHECK PORTS PER ROLE/TYPE
        [array]$complist = @($ScriptParams.ComputerName)
        if ($ScriptParams.ComputerName -ne $ScriptParams.SqlInstance) {
            $complist += $ScriptParams.SqlInstance
        }
        foreach ($computer in $complist) {
            foreach ($port in ($setting -split ',')) {
                Write-Log -Message "testing port: $port ($computer)"
                try {
                    $conn = New-Object System.Net.Sockets.TcpClient($(hostname),$port)
                    $tempdata.Add(
                        [pscustomobject]@{
                            Hostname = $(hostname)
                            Port     = $port
                            Open     = $conn.Connected
                        }
                    )
                    $good++
                }
                catch {
                    $tempdata.Add(
                        [pscustomobject]@{
                            Hostname = $(hostname)
                            Port     = $port
                            Open     = $False
                        }
                    )
                    $bad++
                }
                $counter++
            } # foreach port
        } # foreach host
        if ($bad -gt 0) {
            $stat = $except
        }
    }
    catch {
        $stat = 'ERROR'
        $msg = $_.Exception.Message -join ';'
    }
    finally {
        Set-CmhOutputData
    }
}